I wanted to let everyone know that older versions of AWSOM Pixgallery will not work entirely correctly in WordPress 2.6 based on the changes that have happened in the way certain paths are determined in WordPress. The basic features of Pixgallery should work fine, but certain other features, most notably the automatic default gallery creation during plugin install, the automatic cache folder creation during plugin install, and the “clear the cache folder” function in the Pixgallery Captions admin menu may not work correctly.

The current projected date for release of WordPress 2.6 is July 14 2008, and i expect to have a new version of the Plugin available by that date that fixes these issues, but I just wanted to caution any early adopters to make sure that you know that there could be some issues.

ShareThis

WordPress 2.5.1 has been released, and all 2.5 users should immediately upgrade to the new version. There is apparently some kind of security vulnerability fix in the new version, so this is a critical upgrade for all users. I suspect it’s probably related to the ongoing series of issues that are causing spam attacks on older versions of WordPress, so this is a pretty big reason to be constantly on the lookout for irregular things occurring on your sites and make sure you always have the most updated versions of plugins and such installed.

So far it looks like all of the AWSOM plugins are unaffected by the upgrade and still work properly. If you encounter any issues though please let me know.

ShareThis

There is currently a large scale spam attack on Wordpress sites that is ongoing and affects primarily Wordpress versions 2.1.x and 2.2.x (it’s not clear if 2.3.x or 2.0.x are affected, but it seems likely they aren’t). The attack results in a large number of spam listings injected into either posts or theme files which are then set to be hidden through css. Your will typically find that you’ve been affected when Google contacts you to say you are being de-listed due to a high number of spam links on your site. It is also typical for the attackers to delete all of your pages from your site for some reason, so if you load your site and all of your pages are gone you may have been hacked.

It’s not entirely clear what method the hackers are using to get admin access to the affected sites, but from my observation it may be a privilege escalation attack using the comment system. In some cases a random user account was created right before the attack. It was also noted that the comments.php theme file was altered to add in a console access applet which allowed for low level server access. If you get hacked make sure you check every theme file to make sure no malicious code was added–or better yet, reload your theme files from a backed up or fresh copy, and delete out any suspect user registrations.

Wordpress 2.5 is apparently not affected by this problem, so an upgrade should help. I have upgraded my sites to 2.5 and have managed to mostly get things working (though my archive page on this site is currently non-functional). It looks like this is the unfortunate little push that will force most people to upgrade, though I strongly suggest making sure first that there are updated plugins that work with 2.5.

ShareThis

I have just released new versions of the AWSOM Pixgallery(4.5.3), AWSOM News Announcement(1.4.2), and AWSOM Uninstaller (1.0.2) plugins for Wordpress that have been made specifically compatible with the upcoming Wordpress 2.5 release (the AWSOM Archive plugin was already fully 2.5 compatible with version 1.4.0). This means that they will install properly and work as they currently do. AWSOM plugin versions previous to these new releases will NOT install properly on Wordpress 2.5 due to a major change in their plugin protocol (though I believe that already installed plugins will not stop working, I can’t guarantee that–especially if you deactivate/reactivate them during the Wordpress upgrade process).

I will probably come out with another minor release of the plugins after Wordpress 2.5 is officially released that does some cosmetic changes to my admin pages for the plugins, but this will have to wait until they finalize the CSS they are using for their admin pages (right now they all look fine, but don’t really match the new look of the admin area in 2.5). For the moment though everything will work properly, so you at least have one less worry if you plan on upgrading to Wordpress 2.5 :)

ShareThis

AWSOM Pixgallery version 4.5.2 has been released. This version of the image gallery plugin for Wordpress fixes a problematic bug related to the EXIF function, and finishes the Individual Comment system by displaying pre-existing comments on the main gallery level (as opposed to not showing them at all :) ). It also adds in a new debug mode for admins that will allow them to see extra information about their gallery set up to help fix display issues–it also displays the sort order number attached to an image or gallery in the thumbnail view to help in using the numerical sort option.

It is strongly suggested that all AWSOM Pixgallery users upgrade to this new version.

ShareThis